13782 matches found
PT-2022-6318 · Zyxel · Zywall/Usg +3
Name of the Vulnerable Software and Affected Versions: Zyxel ZyWALL/USG series firmware versions 4.20 through 4.72 Zyxel VPN series firmware versions 4.30 through 5.32 Zyxel USG FLEX series firmware versions 4.50 through 5.32 Zyxel ATP series firmware versions 4.32 through 5.32 Description: The...
Amazon Linux 2 : gnupg2 (ALAS-2022-1834)
The version of gnupg2 installed on the remote host is prior to 2.0.22-5. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1834 advisory. A vulnerability was found in GnuPG. This issue occurs due to an escape detection loop at the writestatustextandbuffer function in...
DEBIAN-CVE-2022-37770
libjpeg commit 281daa9 was discovered to contain a segmentation fault via LineMerger::GetNextLowpassLine at linemerger.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...
CVE-2022-37770
libjpeg commit 281daa9 was discovered to contain a segmentation fault via LineMerger::GetNextLowpassLine at linemerger.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...
Ropr - A Blazing Fast Multithreaded ROP Gadget Finder. Ropper / Ropgadget Alternative
ropr is a blazing fast multithreaded ROP Gadget finder What is a ROP Gadget? ROP Return Oriented Programming Gadgets are small snippets of a few assembly instructions typically ending in a ret instruction which already exist as executable code within each binary or library. These gadgets may be...
The vulnerability of the command-line interface (CLI) of the Cisco Nexus Dashboard platform, a tool for analyzing and automating cloud network management, allows a perpetrator to escalate their privileges.
The vulnerability of the command-line interface CLI of the Cisco Nexus Dashboard platform for analyzing and automating cloud network management exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the command-line interface (CLI) of the Cisco Nexus Dashboard platform, a tool for analyzing and automating cloud network management, allows a perpetrator to escalate their privileges.
The vulnerability of the command-line interface CLI of the Cisco Nexus Dashboard platform for analyzing and automating cloud network management exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to increase their privileges...
libjpeg 缓冲区错误漏洞
libjpeg is a C language library for processing JPEG format image data. It includes JPEG decoding, JPEG encoding, and other JPEG functions. A buffer error vulnerability exists in libjpeg commit number: 281daa9, which stems from a memory segment error in LineMerger::GetNextLowpassLine in its...
PT-2022-24060 · Libjpeg +1 · Libjpeg +1
Name of the Vulnerable Software and Affected Versions: libjpeg version 281daa9 Description: The issue allows attackers to cause a Denial of Service DoS via a crafted file, exploiting a segmentation fault in the LineMerger::GetNextLowpassLine function at linemerger.cpp. Recommendations: For versio...
The vulnerability of the command-line interface (CLI) of the Cisco Nexus Dashboard platform, a tool for analyzing and automating cloud network management, allows a perpetrator to escalate their privileges.
The vulnerability of the command-line interface CLI of the Cisco Nexus Dashboard platform for analyzing and automating cloud network management exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the command-line interface (CLI) of the Cisco Nexus Dashboard platform, a tool for analyzing and automating cloud network management, allows a hacker to escalate their privileges.
The vulnerability of the command-line interface CLI of the Cisco Nexus Dashboard platform for analyzing and automating cloud network management exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
[SECURITY] Fedora 35 Update: fzf-0.29.0-2.fc35
fzf is a general-purpose command-line fuzzy finder. It's an interactive Unix filter for command-line that can be used with any list; files, command history, processes, hostnames, bookmarks, git commits, etc...
CVE-2022-29959
Emerson OpenBSI through 2022-04-29 mishandles credential storage. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. This environment provides access control functionality through user authentication and privilege management. The credentials for various users a...
fdkaac 安全漏洞
fdkaac is a command-line front-end for the libfdk-aac encoder by the Japanese individual developer nu774. A security vulnerability exists in fdkaac commit number: 53fe239, which stems from a floating point exception in its wavopen at /src/wavreader.c component...
[SECURITY] Fedora 35 Update: rust-ffsend-0.2.71-3.fc35
Easily and securely share files from the command line. A fully featured Firef ox Send client...
DotDumper: Automatically Unpacking DotNet based Malware
DotDumper: Automatically Unpacking DotNet Based Malware By Max Kersten · August 11, 2022 The automatic detection and classification of any given file in a reliable manner is often considered the holy grail of malware analysis. The trials and tribulations to get there are plenty, which is why the...
Node.js: HTTP Request Smuggling Due to Incorrect Parsing of Multi-line Transfer-Encoding (improper fix for CVE-2022-32215)
Summary: Due to an incomplete fix for CVE-2022-32215, the llhttp parser in the http module in Node v16.16.0 and 18.7.0 still does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling HRS. Description: add more details about this vulnerability We have...
qpdf bug fix and enhancement update
An update is available for qpdf. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list QPDF is a command-line program and a library that does structural,...
mariadb: assertion failure in sql/item_func.cc
A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/itemfunc.cc:148, affecting availability...
buildah bug fix and enhancement update
An update is available for buildah. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The buildah package provides command line tool for creating Open Container...